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AMENDMENTS TO THE SPECIFICATION 

Please replace the paragraph at page 13, lines 19-28, with the following amended 
paragraph: 

--Submit module 70 is preferably an active server page, but also includes APIs or 
other program modules needed to perform preliminary processing on results data. 
Submit module 70 may need to authenticate the user via session key cookie 82 
prior to further processing of the hidden results. Once authenticated, submit 
module 70 communicates the hidden results to a turn-in API 72, which verifies 
the source of the hidden results and stores the results in database 64. Submit 
module 70 also produces a confirmation page 98 that is communicated to client 
browser 80 to inform the student that the results were accepted and stored. 
Confirmation page 98 can also include a detailed results link 99 that enables the 
student user to access detailed information from proprietary provider 100 
regarding the student's performance on the test material in the proprietary- 



Please replace the paragraph at page 14, lines 7-22, with the following amended 
paragraph: 

-FIGURE 3 is a flow diagram illustrating high-level logic of an overall process 
for controlling access to protected propriety data of a proprietary provider from a 
browser and LMS. At a step 1 10, the proprietary provider provides the LMS with 
proxy metadata through a setup or out-of-band communication to the LMS. As 
indicated above, the proxy metadata preferably comprise the proprietary 
provider's public key, a URL to the proprietary provider's run-time module, an 
LMS ID assigned by the proprietary provider to recognize communication from 
the LMS, and other information needed to facilitate communication between the 
proprietary provider and the LMS. The proxy metadata also preferably 
[[include]] includes information regarding assignments and/or other proprietary 
data accessible to the LMS from the proprietary provider. For example, 
assignment information can include a unique assignment ID for each assignment 
made available to the LMS by the proprietary provider, an access code to access 
one or more of the assignments, a short description of each assignment, directions 
for performing the assignments, maximum possible points available for each 
assignment, and any other preliminary information about each assignment that the 
proprietary provider wishes to release to the LMS.~ 
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Please replace the paragraph at page 25, lines 1-7, with the following amended 
paragraph: 

-public key. At a decision step 202, the LMS turn-in API determines whether the 
digital signature was valid. If the digital signature was not valid, the LMS turn-in 
API processes an error at step 194. Alternatively, if the digital signature was 
valid, or ifthere was no digital signature, the LMS turn-in API stores the results 
data in the LMS database, at a step 204. Those skilled in the art will recognize 
that the turn-in API (or the submit module) could alternatively, or additionally, 
decrypt the results data and perform a check sum or other validation step before 
allowing the results data to be stored.- 
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